nooxnft[.]net

The domain nooxnft.net was registered on February 21, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com and is currently active. The site returns an HTTP 301 redirect and presents the page title “Noox | Proof of achievements for your Web3 life”, indicating a focus on Web3 or NFT‑related content. The classification in the intelligence feed lists the activity as a crypto drainer.

Technical infrastructure shows the domain resolves to 172.67.146.103, an address owned by Cloudflare, Inc. (AS13335). The authoritative nameservers are armfazh.ns.cloudflare.com and princess.ns.cloudflare.com, both hosted on the same provider. The TLS certificate is issued by Google Trust Services under the WE1 root, confirming the use of a valid public certificate.

Threat intelligence sources have flagged the domain. PhishDestroy has added it to its blocklist, and it appears on one additional security blocklist. An AlienVault OTX pulse references the domain, and VirusTotal reports 14 out of 95 security scanners flagging it as malicious. Gridinsoft assigns a trust score of 0 out of 100, reinforcing the high‑risk assessment. The risk level is marked as high, and the threat type is identified as a cryptocurrency drainer.

Defenders should immediately block DNS resolution for nooxnft.net and any subdomains, and enforce network‑level filtering of traffic to the associated Cloudflare IP range if feasible. Continuous monitoring of DNS queries and TLS handshake logs is recommended to detect potential reuse of the same infrastructure. Incident response teams should alert users that any unsolicited requests for Web3 credentials or crypto transfers originating from this domain are likely malicious, and should advise removal of any related wallet permissions.